The SECRET to FSLogix | Azure Virtual Desktop
ฝัง
- เผยแพร่เมื่อ 6 ก.ค. 2024
- Want to unlock The Secret to FSLogix for your Windows Virtual Desktop environments? There's many ways to configure this remote profile management software but the real Secret to FSLogix is knowing the things that the others will never tell you! Tune in to find out more. If you want to Master the Azure cloud you can start right now by clicking Subscribe aka.ms/AzureAcademy-Subscribe and the notification bell so you don't miss anything.
▬▬▬▬▬▬ C H A P T E R S 📲 ▬▬▬▬▬▬
0:00 Secrets to FSLogix
1:19 Performance Secrets
4:45 Persistence Secrets
10:16 Protection Secrets
12:55 Bonus Secrets
13:55 Happy Learning!
▬▬▬▬▬▬ R E S O U R C E S 📡 ▬▬▬▬▬▬
► FSLogix for the Enterprise - docs.microsoft.com/en-us/azur...
► FSLogix Documentation - aka.ms/fslogix
► FSLogix Maintenance Script - github.com/FSLogix/Invoke-Fsl...
▬▬▬▬▬▬ S U P P O R T 💰 ▬▬▬▬▬▬
► Become a Learner TODAY: tinyurl.com/AzureAcademy-Subs...
► Twitter: / msazureacademy
► LinkedIn: / dean-cefola-2902934b
#TheAzureAcademy #WindowsVirtualDesktop #FSLogix - วิทยาศาสตร์และเทคโนโลยี
If you want to Master the Azure cloud you can start right now by clicking Subscribe aka.ms/AzureAcademy-Subscribe and the notification bell so you don't miss anything.
Dean's list of best practices: 1) Keep VMs close to the profile storage repository 2) avoid a Win file server 3) Size for logon storms 4) 1:1 ratio for shares and host pools 5) design for either using Cloud Cache or not depending on the use case 6) Implement ADMX Templates to manage via GPO 7) use “Virtual disk type VHDX” files to allow file shrinking with Jim Moyle’s script and deploy the script to maintain the thinnest possible set of containers 8) use “Dynamic VHDX allocation” for ongoing thin provisioning 9) use “Swap directory name components” for mgmt ease 10) consider using “Delete local profiles when FSLogix Profile should apply” when cutting over from local/roaming profiles to FSLogix 11) use exclusions for AV 12) backup the profile containers, APF = Azure Backup, ANF = snapshots and/or Cross Region Replication 13) for SLAs that demand HA, implement Cloud Cache with a secondary share but consider the increased logon time compared to VDH direct access 14) Frank’s added item, avoid Profile Type Mode3 that uses diff disks unless needed as it causes a logoff storm to the storage during the merge operation of the diff disks to the primary profile container
Thanks Frank...that is a great recap!
Dean, you're on of my go-tos everytime. I've paid significantly for content nowhere near as good as you're keep it coming and thanks 💯
WOW...Thanks!
Fantastic stuff ! Thanks was looking for a comprehensive demo, glad I found this ;)
Happy to help…please share The Azure Academy with your friends and social media ☺️
Man, that was awesome.. a million thanks for creating such useful content 👍
Thanks Mohammed, let me know what other content you are interested in
One of my favourite channel. Thanks for sharing this
Glad you enjoy it! Please share the video and The Azure Academy with others so they can learn more as well!
Thanks for a simple straight content.!!
👍👍
Great material. Thanks for sharing!
glad you enjoyed it...please share it this video and The Azure Academy with others so they can keep learning as well!
This guy is a nerdy Azure blackbelt but he is also a guy you could have a beer with at the bar! Top man!
👍👍 🧃🍺🥃🍸🍹🧉🍷🥤🧋👍👍
Here’s something for everyone!
Thanks Dean... Very important for me... I use it all days but something miss... Now is more clear... Thank you so much for all your work again
Happy to help Alessandro!
What a wealth of information. Thanks Dean I can use this information with my customers.
Thanks Malcolm, by all means share it with your customers as well as any co-workers etc who want to learn more about all things Azure
Thank you for your time for making this video, it saved lots of our time :D
Glad it helped you Kelvin, please share The Azure Academy with others!
awesome! thankyou!
👍👍
I'm loving the new video style. Great content as always. Thank you!
Question.
Do you know of a script or built in function that can be leveraged to delete profiles after x amount of inactivity. Or if the associated AAD account has been disabled.
Or better yet how about relocating the profile to a standard /cold storage drive to sit for x days prior to being removed.
There is no existing script that I know of to find while .vhd(x) file has not been mounted in a certain period of time and delete it...or one that associates a .vhd(x) file to a user.
You can certainly do all of that...but you need to write it.
Awesome awesome video as always.
Thanks @Jenzus
Thanks for the great video. My question is, what is your recommendations in differentiating profiles for different OS types (Win10 1909 n 20h2, 2012 r2, 2016)?
In what way are you thinking? The OS generally has very little to do with it because the larger question is about the users data and settings
Hi, great video , Does the VHDX expand even it reaches the maximum size let' s say the default size of 30 GB ?
it depends. If you use the FSLogix policy to set the size...then you would have to manually expand the disk once it gets full.
If you want to go that way...I suggest a VERY LARGE disk so you don't have to do maintenance often.
However, the way I like to do it is to use dynamic disks and .vhdx files.
I DO NOT set a limit and I allow the disk to keep growing.
I have helped customers use alerts if a single vhdx gets to be too large and they want to do maintenance to shrink it.
Thanks Dean. 👍
Anytime Richard!
Very usefull 🙏
Thanks! Please share this video with others so we can help everyone keep on learning!
Thank you for making this video! By the way, how about cloud cache storage for Azure Page Blob? Is it recommended?
No it is not...it would work, but you should use Azure Files or Azure NetApp Files
Awesome materiel! Your videos greatly influenced our WVD build. One thing I would like to add around Cloud Cache is how we can have it go a different directory.. In our case we decided to send it to the temporary disk Azure gives with many of the SKUs. Those are super fast! Quick example, we used the D4_v3 (100GB temp). The user's profile IOs hit the temp disk and leave the C:\ drive alone.. Thus allowing us not to go Premium Disk for all VMs in the host pool. Save $$$
That is an interesting solution, but I offer a word of caution. The temp disk is volatile storage and if something happens and the VM reboots you will lose any data that is there.
@@AzureAcademy Absolutely!
👍👍
Loved your video as always! This is certainly something I have tested in my Dev environment but it was great seeing your video to validate what I have tested. Have you explored with configuring FS Logix profiles to azure blob storage? This is also something I have worked on in my Dev environment. For enhanced Security I integrated the use of windows credential manager by running a couple commands with the frx.exe command line and inserting an extra value in the CCDLocations connection string. Just curious if you have tried it yourself! I have only use this in my Dev environment and have not used in any production environment.
I have...however Blob storage is not as performant as file storage so I don’t use it anymore.
Also the AD Authentication provides a scalable security layer for accessing the file storage.
@@AzureAcademy I appreciate your response!
anytime!
Hello Dean, not sure if I've misunderstood but you suggest you don't need an Office container, but what if I'm running Outlook cached and maybe caching OneDrive - using files on-demand?
When you do not use an office container all data gets stored in the user profile. This means all the onedrive files and Outlook cache data. There are other exclusions you can put in place to not store that data in your profile...but the data has to go somewhere. meaning that the data might end up on the local c:\ drive taking up space. If you are using files on demand and limiting the amount of data onedrive can download...as well as limiting the total space on the c:\ drive onedrive can take up this should be relatively small.
I really liked the way you've articulated and the content of the video.
I was looking for the best way out from AWS workspaces and I found this.
I would like to see more on the below topics (if possible) -
1. AWS Workspace vs Azure WVD (Features and cost comparison)
2. WVD implementation with use cases examples (Shared pool of virtual desktops and personal desktops)
3. How to do capacity planning for pooled desktops and personal desktops
Thanks! Capacity planning begins with understanding your applications and their requirements. Then how many users do you have to support in your WVD environment.
The next question is his do you want to manage things? Few large VMs or many small VMs.
All these together will dictate how many users each VM support and how many VMs you need to manage.
On your question on implementation...can you be more specific? I gave several videos on the channel for implementations of many kinds.
@@AzureAcademy Thanks for your reply. That is exactly what I need. I read somewhere that there are few factors which we need to plan before selecting the correct size of the VMs suitable for the WVD per use case.
For example, if I've 2 different sets of users whom I do not want to give personal desktops then those need to access the apps but not both in the same place, then I need to create two separate pools for both sets of users. Now, if I've 50 concurrent users who would be accessing the pool WVD at a time then what are the things I need to consider to the size of the VMs i.e. number of users per cpu core, memory, etc. And how many VMs will suffice the need? I'm looking for a similar kind of information that can help me to understand the sizing factors (i.e. CPU, memory, storage to store user profiles, etc.) for different types of WVD implementations (pool or personal).
these are the right questions to be asking.
The ANSWER to those questions goes back to the applications you need the users to be running on the WVD Session Hosts.
For example...If the users do not need ANY apps...they only need to log on to the windows desktop, sit there and do nothing...then you can have A LOT of users on 1 small VM.
But that is NEVER the case...users need apps.
So lets say the users need Microsoft Word and a web browser. You will still get a lot of users on a small VM.
but lets say that the app they need is AutoCAD. Now a small VM won't be able to have 1 user on it...because there aren't enough resources.
So now you need a big VM.
and if you want Multiple users on that VM to use AutoCAD...you need a REALLY big VM with multiple GPUs.
does that help?
It all starts with the apps your users are running.
I would use word GREAT, but it would still not express what you just did in this video about explaining fslogix. Magical explanation ... Thank you
WOW…Thanks Greg!
☺️👍👍
Hi. Really good and helpful videos but i had a question. I inherited a WVD environment and i need to reboot the server that they configured FS logix on. It somehow lost domain connectivity and im concerned thats going to impact the desktops. Is there anything you can advise prior to doing that?
Losing connection to the domain can happen when the computer account password changes. Or the permissions change…or there could have been a problem.
If it happens restores the connection as soon as you can by forcing the computer object password changes or permissions update.
Finally take a look at Azure AD Kerberos as an alternative to AD Authentication
th-cam.com/video/suvDH-yNL88/w-d-xo.html
awesome video
Thanks Mani!
Slack installs into the appdata folder for sure Checked myself today.
LOL where there’s your problem…using Slack instead of TEAMS 😳🤦♂️🤪
Thanks I will look into it
With Cloud Cache do we need to consider the disk / storage sizes available on our session hosts?
Yes, in 2 ways.
1. Total capacity
2. Performance
You may need a larger C:\ drive to accommodate all the users you are planning for, also the number of users will also impact the performance of the Disk.
The easiest solution to manage...and I believe the least expensive is to increase the size of the C:\ drive as needed rather than adding additional disks
Great video! Could you do a demo on Azure Vmware Solution migration?
Thanks, do you mean migrating into the new AVS solution or migrating from VMWare onPrem into Azure?
trying to get my head around the concept of delete local profile setting along with cloud cache senario. will it delete the local profile if so wouldnt it be counter productive if we loose file share and "delete local cache" deletes local profile? And also in the pooled secnario how a user would get local profile if logged in to different vm?
1. Delete Local Profile: we use this setting because you want those users to ONLY use their FSLogix profiles. Yes this means that if the FSLogix storage is not available then they won't be able to log in...however if you don't do this then your users WILL log in, and get a blank profile then they will call support and yell that you have deleted all their files!
So in my opinion, I would rather than users be blocked and I can fix the storage then users being afraid that all their stuff is gone...AND I have to do the work to delete their local and temporary user profiles.
2. Cloud Cache: There are 2 sides to cloud cache. The local cache, which is temporary and the Azure storage.
The temporary storage is configurable to be deleted when the user logs off, which I recommend.
Then the Azure storage. This storage is where the profile lives permanently.
It is the cloud cache agent on the VM Host that handles replicating all the changes from the local temporary storage to all your azure storage replication points
Great information! One fine point that is very interesting- FSLogix is not using a standard VHDX mount over the network, it has a driver that teaches the OS to treat it like a local disk device which has important benefits for performance and network efficiencies
Great point!
You can add a registry key "volume type" this will switch it from VHD to VHDX, detailed steps from the below link:
docs.microsoft.com/en-us/fslogix/profile-container-configuration-reference
You will be able to shrink the size of the VHDX + other features
not automatically...but you can do it manually
Great video, thank you! It sounds like cloud cache is a nice layer of DR scenario, but it seems like we end up needing more storage?! Assuming that VHD locations share is down, what happens to locally cloud cached profile if user gets pushed to a different session host in the same farm?
Nothing. That is the beauty of Cloud Cache.
A user connected NOW using cloud cache, the primary storage goes away, the user profile can still write to the secondary storage.
With VHDLocations if the storage went down the user session would crash.
The user would lose anything in their session that wasn’t written to storage
They would have to log back in.
So cloud cache functions in a storage DR scenario in the primary region and in a regions DR outage scenario
@@AzureAcademy Thank you, that is awesome. I keep forgetting that even cache storage can be geo-replicated. Really good stuff, thanks for all the content!
👍👍
Awsome video, but who do we upload the GPO to Domain controllers in ADDS, since we do not get access to those DC that are managed by MS? Or is just and GPO template that we can deploy?
Here is how you can import group policies.
docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy#create-a-custom-group-policy-object
However I do NOT believe you can import 3rd party GPOs like FSLogix to AADDS because you don’t have access to the domain controller.
The only other possibility…MIGHT be if AADDS has setup the new central GPO store
docs.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store
You can try and set this up…but I don’t know if it will work
If all else fails then you can configure FSLogix with a powershell script when you build the VMs or through a GPO that applies a powershell script, or directly apply the registry keys
@@AzureAcademy I appreciate this, thanks!!
+Ladi7724 you can’t. AADDS doesn’t support 3rd party GPOs.
To automate the process you need to use a custom script extension when the hosts are built. Here is an example from my GitHub - just click the deploy to Azure button
github.com/DeanCefola/Azure-WVD/tree/master/WVDTemplates/WVD-NewHost
Hey Dean.
Thanks for this video.
Great explanations and great effects :) I love it.
Question : I have 1 forest but many host pool connected.
You say one share file by host pool but all this share file can be in the same storage account ?
And if I have 500 host pool so 500 share file must I have many storage account or it’s correct?
And another question :
I see local profile even if I connected with fslogix profile it’s normal ?
If I use gpo for delete local profile, it delete before login or after ?
Thanks again Dean.
A standard storage account can get up to 25,000 IOPS. So if you have 3 shares that use 5,000 IOPS each this that would work fine in the same storage account.
But keep in mind this is a general best practice since maintenance will need to happen on a host pool and profile storage and if they are all in 1 account that will be difficult
As for the local profile please clarify. Are there local_username folders or are there ordinary windows profiles for users?
Remember what I said about the delete profile if exist setting...if you already have a windows profile for a user on the VM FSLogix will not work for that user.
To delete the profile and force the user to use the FSLogix profile... myopic need to set that setting
BEWARE that you will be deleting user data
@@AzureAcademy thanks for response.
For the local profil it’s a new user and I see the user profil it’s local when you go to windows profil manager.
Maybe it’s a virtual profil ? I see too profil created in my data server !!
is the local profile named local_ or is it just
Hi Dean, it would be good to see integration with fslogix & OneDrive - for example as an educator we utilise remoteapp rather than the desktop and while fslogix is great for moving around host pools we have a number of students that use either the html interface or chromebooks - so saving to local device is not really an option but KFM and OneDrive seamless connectivity in the background would overcome this - although its proving tricky to implement... maybe a video!?
Hey Tony, thanks for the suggestion! interesting problem to solve. I would generally NOT recommend storing OneDrive data in my user profiles because you already store that data in the cloud...why pay to store it twice? You can add an exclusion for Onedrive into your FSLogix config so it doesn't store onedrive data at all...Combining this with files on demand and limiting the space OneDrive can take up on the local machine will keep storage usage down and keep your profiles smaller.
Does that help?
@@AzureAcademy Thanks for the reply Dean, with the KFM and files on demand enabled via GPO I would expect only stub files would be stored in the fslogix profile? The issues we see are chrome books or html5 user access, if the student has data already stored in OneDrive then its accessible via the app with file/open; as a separate note have noticed some freeware apps dont utilise the typical windows/file open dialog so the redirected drives do not appear.
File/open to redirected drives can be painfully slow but accessing from OneDrive is quicker. The office apps work well with OneDrive, its the other apps like solidworks, IBM SPSS and the CAD apps that seem to struggle with redirected drives - we are being very specific by using remoteApps over the desktop as students might only need one or two apps and not the full desktop - an example can be found here - www.robinhobo.com/how-to-start-onedrive-and-automatically-sign-in-when-using-a-remoteapp-in-windows-virtual-desktop-wvd/ but not working as expected, i did read somewhere that this is not supported ...
Yeah, there was an issue with remote apps and OneDrive…I think that there is either a fix now or or is coming soon
Hi Dean. Great video as always. Indeed a lot of learning. However I do have a query for you. Can we change the profile type from VHD to VHDX through GPO now when we have nearly 200 users moved into WVD platform? What happens to the already created user profile? Also if possible can you make some video on Azure security center showcasing how it can be helpful for a new WVD environment.
The thing about some of the features in FSLogix is that they only apply when the profile is created
The disc type happens to be one of them.
I suggest testing this process thoroughly before putting it into production...
Set up a test OU you so you can apply policies cleanly.
Create a new test user with a .VHD file for your profile desk then convert the desk to .VHDX
Log off the user and change the policy from disk type .VHD to .VHDX
Log back in with the user and see if the .VHDX profile is mounted or if it creates a new .VHD profile.
Hi Hara, did you try it and how did it go? I am planning on the same.
let us all know 😎
Hi Maybe if you can share us the sample tutorial on how to implement Microsoft FsLogix on VDI On-premise in Manage Pooled.
Good suggestion…however I don’t have an on prem VDI to demo for you 🥺
The good news is The implementation is the same
Configure FSLogix with registry or GPO
The SMB file share will be on local storage
So a SAN or NAS is preferred but a windows storage spaces direct server/cluster also works
And you are done
Really great about insights of FSLOGIX. We are using the 0365 cache can you explain that alsoo.
working on a follow up video now...check back on Sunday
@@AzureAcademy
Thanks a lot also any other solution for office 365 profile apart. Like fs logic
there is...stay tuned for my next video to learn more 😁
Hi Dean, great video! One question to resilience and protection at 11:30, isn't FSLogix writing just to one (the first) VHDLocation and just to the 2nd / 3rd if the first one is not accessible?
This would result in a new profile except I sync / copy the profile from one VHDLocation to another.
Thanks
in VHS Locations writes to 1 at a time...yes. Cloud Cache writes to local and all remote with replication. Primary gets fastest write, all others are lazy writes.
@@AzureAcademy thanks 😉
I always preferred Betamax to VHS
👍👍
yeah, yeah, yeah...I remember Betamax! Much better quality than VHD. but hey its all in the marketing 😉 All hail VHS LOCATIONS!!!
Please create a video for App Masking and Java thingy as well. Cheers
LOL Java thingy...😁🤣🙌
Hi Dean, is there a way to monitor the Size of Fs logix profile disks and generate alerts for those ????
Azure monitoring tools can see the % of used space on the files share, not the size of a single disk. Also, billing is done at the file shares level. An easy way to shrink the disks is to use this script, and remove the “white space” in the disks - github.com/FSLogix/Invoke-FslShrinkDisk
@@AzureAcademy thanks Dean!!! :)
anytime!
Any way to limit the size of the profiles? Also if you enable the flip feature (to flip usernames and sids) what happens in an existing environment with profiles in the other format already existing
Not sure exactly...haven’t done it on existing environment...my understanding is that several of the configurations take effect when you create the profile only...
I believe flip flop is one of them...like size in MB
However I have not tested this...so I would test in an isolated environment before changing your production GPOs
On the second question of limiting size. Size in MB will limit the maximum size of the profile disk...default is 30GB
But once the profile is created the size is fixed...meaning the default of 30GB or whatever you set it to be.
My advise is to make the size in MB 100GB...
and limit exclude anything you don’t want in your profile to keep the space down. so you don’t run into users being blocked because their profiles are full...AND you use the profile shrink tool during your maintenance cycles to keep them as small as possible
Hello Dean, we have a pooled AVD environment and no fslogix profile used so the users have profiles locally saved. For 81 users in the C drive, it used a lot of space. Can FSLogix profile with the "Delete Local profile when VHD attach" is enabled will help in freeing space on the C drive since the user profiles will reside now in the Azure File Share ? When we deploy the FSLogix profile, the user profile will not over populate the C Drive Storage?
Yes, IF the user logging in has a FSLogix profile The delete local profile feature will check for a local profile for the same user and delete it, then complete the login for the FSLogix profile
@@AzureAcademy noted Dean, so FSLogix really helps so the C Drive will not be full even there are lor of users since the user profile will resides in the Azure file share and not in the local C drive of the VM? Just want to make sure. Thank you Dean!
Any time!
Hi Dean! one question i just observe that i don't configure the VHDX files from the ... then all the actual profiles are VHD... if now I put Virtual Disk Type on VHDX what happens with the existing profile... nothing change or maybe will create a new profile and I will find the old VHD one also the new VHDX one... thanks
i managed to try it in an test enviroment and yes... he create a new profile with vhdx extension.... i write it for others... anyway what do you think can be the possibility to change it without create a new one :( ....
🤔
sorry for the delay...I didn't see your second question...
Are you asking if you can convert the .vhdx to .vhd?
Yes you can, but FSLogix won't do it for you.
You need to do it with PowerShell. and I would make a copy of the .vhdx and convert that...just in case something goes wrong 😎
I could be wrong, but you can only have one "VHD Location," not multiple (11:25 mark). You can have multiple Cloud Cache Locations, that was the point of the CC feature when added (which works awesome). Feel free to correct me if this was a new feature added to VHD Location
This is not a new feature. You can have multiple VHD locations. However they function differently than cloud cache.
If you lost connection to VHD Location 1 your session would drop.
When you reconnect VHD location 2 would load the profile. That profile will potentially be out of date compared to VHD 1, depending on when it was last updated
FSLOGIX DOCS - docs.microsoft.com/en-us/fslogix/configure-profile-container-tutorial#configure-profile-container-registry-settings
See the reg key can either be single or multi-string
Thanks, that makes sense. I never knew you could have multiple targets in the VHDlocations, though that was strictly a CC function that was added. So CC is "one to many at a time" and VHDLocations is "one to one at a time".
Learn something new every day, great series BTW, very informative and helpful on my AVD journey.
Thanks Aaron!
Hey Dean, at 05:56 you mention the regkey for VHD Locations and the SMB share, but then at 08:54 you say if using GPO to disable VHDLocations and enable cloud cache... Can you explain why to me please if you don't mind? Thanks
Okay so you pretty much explained it in 11:56, I jumped the gun. Question though, if the writes are happening on the local hidden disk, that won't affect the C: of the WVD etc will it?
I'm currently setting up a WVD environment and have VHDLocations turned on but if Cloud Cache is better, I'd prefer to change it now before implementation, rather than after :)
No worries Aaron!
Cloud cache can impact the C:\ drive because each user will be waiting to the disk. So depending how many users you have performance can be a concern. If you see an issue, increase the size of the drive.
Cloud cache has better DR options, but is slower to log on by a few seconds.
If you are not planning for DR... then VHD locations is great, but you should think about your DR strategy and watch my DR video
th-cam.com/video/cTllLvZ6nw8/w-d-xo.html
👍👍
@@AzureAcademy excellent, I'll have Azure Backup for the FSLogix file share, no DR scoped as of yet, but I know I can swap from VHDLocations to CCDLocations in future so I'll keep that on the radar!
Thanks for the reply
👍👍 Anytime!
Do you know how to move the bar in outlook to show more than 1 month of emails? I am needing to show at least, 6 to 12 months, but it is greyed out and stuck on 1 month. Hard to look up emails older than a month
Not sure what you are referring to here with outlook...which outlook bar are you talking about?
You have not told about the exclusion and inclusion option in profile. Can you pls help me on this.
I was doing the profile but nothing is getting saved on the profile.
Any more option need to be enabled for the same.
Sorry but I’m not understanding about exclusion or inclusion, please clarify…?
If nothing is getting saved then validate permissions on the file share for your users
NetApps Replication ... Yessir
thanks for letting me know you are interested!
Is it possible to use folder redirections for desktop, downloads etc with profile containers?
Do you mean OneDrive redirections or FSLogix redirections? Or something else?
@@AzureAcademy Sorry, I'm talking about normal folder redirections applied via GPO (the ones for desktop, documents etc). I think I found out what's the problem.
In normal folder redirections you do something like c:\temp\things => c:\users\Paul\Desktop
In FSLogix...you don't do this because everything is in your profile...which is in a .vhd file on a file share. But you can do OneDrive known folder moves...which is outside of FSLogix.
Mate just a quick question does FSLogix works without domain controller ? Scenario is I have a environment with multiple computer in a house, Computer is connected to one network and I have a NAS. Is FSlogix works on stand alone users that I create so when I change workstation my data could be loaded on another WS?. Tried FSLogix on WVD and Domain environment and it works but just would like to try the NAS with stand alone accounts if this is possible?.
Yes. Domain controller is not required. You need permissions to the share where the .vhds are located, can be configured in registry with script and local computer groups for VM permissions who can use FSLogix.
@@AzureAcademy Thanks mate I will re try seem that the registry didnt work used this to add the registry.
REG ADD "HKEY_LOCAL_MACHINE\Software\FSLogix\Profiles" /V Enabled /T REG_DWORD /d 00000001
REG ADD "HKEY_LOCAL_MACHINE\Software\FSLogix\Profiles" /V DeleteLocalProfileWhenVHDShouldApply /T REG_DWORD /d 00000001
REG ADD "HKEY_LOCAL_MACHINE\Software\FSLogix\Profiles" /V VHDLocations /T REG_MULTI_SZ /d "\\10.3.3.7\FSLOGIXV2"
REG ADD "HKEY_LOCAL_MACHINE\Software\FSLogix\Profiles" /V VolumeType /T REG_MULTI_SZ /d "VHDX"
remember you need 3 things.
1. FSLogix needs to be installed on you VMs...it is NOT there automatically 😊
2. You need the registry settings or GPOs to configure FSLogix.
3. you need permissions to access the Shares where the profiles are located.
So assuming you have steps 1 and 2...what about step 3?
Since you don't have a domain, how are you granting permissions for the users and VMs to mount the user profiles?
Definitely interested in Java management!
Cool, thanks for sharing IT Ninja…love the name btw. What is Java version control interests you?
@@AzureAcademy Specifically the ability to load multiple Java Versions and tie them specific applications (if possible)
Got it, thanks!
Need help: How do I share a file outside network using azure file storage tenant
You can connect to Azure Files Storage from anywhere in the world on port 445
NetApp DR video as well please. Thanks
in progress
what is the different between DEM and FsLogix? In on-prem what is the best solution for profile management ? App volume does profile management then why would need DEM ?
first off in WVD FSLogix is the supported solution...period!
Second...what is DEM 😁🤷♂️🤔
There are too many acronyms I can't remember them all 😊
If you mean VMware Dynamic Environment Manager (DEM)
this is not supported in WVD at all.
but FSLogix vs DEM in a VMWARE environment...that is a good question
what would / do you use DEM for, then I can help you understand what that experience would be like in FSLogix and you can make your own judgment.
@@AzureAcademy @Moto Moto Z . Yes DEM works with FSLogix. Many customers use DEM in VMWare with FSLogix purely for reporting functionality and let FSLogix do the work of offloading the profile to the file share.
Wow…well you learn something new everyday
Hi
Iam facing some issue with fslogix profiles having more then 200 profiles
The data size of fslogix profile display 3Gb per user and same in disk management, but in same profile file explorer showing its occupied 9GB
It effecting with all 200 profiles
Any fix for this issue.
Is it impacting all 200 users because your file share ran out of space???
First give your file share more space then fix the profiles with this script to shrink all the white space in the profile disks
github.com/FSLogix/Invoke-FslShrinkDisk
After that if you still have issues let me know what they are and I will see if I can help
Hi Dean, the profile is getting locked on user logoff, and it becomes impossible to find the machine it gets locked on.
Are there any good ways to find where it is locked... Ir sny settings to prevent the situation?
The normal behavior is to lock the profile when the user logs on…but it should release the lock after the user data is synced to storage and clean up is done
1. Is this happening on all users?
2. Are you using VHDLocation or Cloud Cache
3. What other settings are you using
4. Has it always been locking profiles or is this recent
@@AzureAcademy thanks for your response.
It happens once in a while.
The storage is azure file share.
Happens for some users. No specific user.
Ah…there are probably open storage handles for the profile disk to azure storage
With the handles there the connection won’t break and the lock won’t go away
I have used this script to find and fix those in the past
👉 raw.githubusercontent.com/DeanCefola/PowerShell-Scripts/master/Storage/_Azure-Files-Handles.ps1
@@AzureAcademy awesome, thanks Dean:)
Anytime!
Hi, is it possible to setup fslogix on the session hosts without having a dc or a master vm?
Yes...but I don’t think you are asking what you think you are asking...
You can install and setup FSLogix on a session host in the registry...no other servers needed.
But
What I think you are REALLY asking
Is if you can setup FSLogix storage without a domain controller or another server to configure the storage.
Yes and no.
NO...if you want to use AD Authentication
YES...if you use blob storage Auth...but that is not generally recommended
I have Azure AD Domain services and that doesn't need a Domain controller, so I need to setup fslogix profiles on the session hosts in the hostpool. And I have created an fslogix file storage account on the azure portal.
So is it possible to setup fslogix on the session hosts?
If Yes, please... please provide me a solution.. Thankyou for the response Dean!
AzureAD Domain Services does handle Auth differently...so for FSLogix you are good to go...but as of today you cannot use MSIX AppAttach because of limits in AADDS.
As for how to setup FSLogix...use a custom script extension to configure the registry when you build the VM.
Here is an example PowerShell script off m GitHub for this
raw.githubusercontent.com/DeanCefola/Azure-WVD/master/PowerShell/FSLogixSetup.ps1
@@AzureAcademy Thank you so much Dean 👍
👍👍
If some users have diferents desktops on the same company and they open differents desktops at same time but only have one profile, which is the best strategy?
As I said in the video each hostpool should have its own FSLogix share so each workload is kept separate
I would ask why you are planning a user to have multiple desktops?
ALSO...If you are thinking 1 personal and 1 pooled
Generally this is not done...if a user gets a personal, they don’t also get a pooled desktop
ALSO, ALSO...generally I don’t recommend FSLogix in personal host pools or in remote app...it certainly can work and it is supported but when you think about what is in a profile...personal doesn’t need it because personal users don’t move from VM to VM and remote App don’t use most of what is in a profile
@@AzureAcademy It's for one environment that have NV machines for 3D design, and some users have normal desktops and others have access to NV machines and normal desktop.
understood...I am working on a follow up FSLogix video for this Sunday...stay tuned!
@@AzureAcademy I will 😉
👍👍
hi i've configured the GPOs and created also a new WVD Hostpool with 20H2 Multi Session - where FS Logix is preinstalled. It's strange, because it won't create the vhdx and the VM gives me always an error about FS Logix. It should got all the correct Settings from my DC. How can i easy troubleshoot this?
You can use the FSLogix logs to tell you why the user could not log on.
Also...just because FSLogix is installed does not mean it is configured.
You need to set the reg keys or the GPOs first ☺️
@@AzureAcademy found the issue, "KRB_AP_ERR_MODIFIED" my VM don't got access to Azure File Share. But all GPOs are set.
How’s it going?
@@AzureAcademy All right Issue is found. The Kerberos Token1 and Token2 are really strange. While Key 1 is fault, Key2 is true. When we try to override Key1 with Key2, we got the same issue. I never have ever seen something like this.
Interesting... did you update the storage account keys?
As far as I see FSLogix does not work for Winodws server hosts (and windows 10 multisession), right?
FSLogix does work on windows server. Here is the doc - docs.microsoft.com/en-us/fslogix/overview#requirements
Just have the right licensing
@@AzureAcademy thanks!
anytime!
what about Outlook Cache mode. has anyone the issue, that its on default 1 month? and it cant be changed with the user policy?
I haven’t heard of that issue Mr Magic...has anyone else had that?
@@AzureAcademy let me correct that. I could actually change the cache to a certain time. :) a gpo at the wrong place doesnt work
ah...ok
Video completed very soon :-(.. If you have added some more points related to FsLogix it would have been much better..
Also, please create Video on Java and App Masking.
I believe you were watching the video during the premiere...the way those work is the video stops a few minutes after the premiere is over...sorry about that
I suggest you watch the video from the beginning...it is about 14 minutes long...and is filled with secrets
The flip flop one makes me laugh because it should be the default.
I agree…but things like this happen when software is developed over time…at some point it seemed like a good idea
Looks like cloud cache doesn't work with 2 netapp ccd location for different region as per microsoft
Can you clarify…”as per Microsoft”?
I have CCD Locations several times in every configuration
Now to be clear netapp, just like Azure files does not span regions
You need to deploy a separate instance in each region but it definitely works so please clarify what you mean
@@AzureAcademy yes cross region netapp ccd location won't support in netapp
Please explain Setting up CCD locations is not enough Apple level configuration… It is done in the FS Logix agent in the windows registry
FS logic does not care what the backend storage is that it replicates to
Net app separately has a feature called Cross region replication which will replicate the entire net up storage frame from region A to region B, but this has nothing to do with FSLogix
And if you are using cross region replication you probably wouldn’t use CCD locations since that would be a duplicate function
Yes the Azure netapp cross region replication is working.
Using fslogix cloud cache if we use both the region netapp smb shares as ccd location user session wont log off as it struck in please wait for fslogix services and after sev 1 case with Microsoft they told its the netapp limitations and won't work
It is not a limitation of NetApp or FSLogix. Both features do the same thing and should not be used together. I prefer FSLogix cloud cache because then I can make the secondary storage something less expensive or less performance
I love this episode, but I guess you are just as confused as me, why DevOps series got less watching. I really love the DevOps series.
yeah...I'm not sure...I had Soooooo many people asking for a DevOps series...not sure why Denny isn't getting more views 😢 Perhaps people don't want to think about the philosophy of DevOps...but that is more important than which tools you use...don't know, but I will keep working it.
Welcome to early 2000s style TH-cam video
WHAT...no way man...this is clearly 2010s style 😁
Great Video, what if I want the Profile VHD size 50 GB bec of the Outloook OST files etc, does it create container with 50 GB size or default only 30 GB.
That depends on the settings you use.
If you use dynamic disk then an initial windows profile is about 150 to 500 MB of physical disk space.
If not, then you are fully provisioning the 30 or 50 GB .VHDx file all at once.
@@AzureAcademy
Okay thanks, what if I have 1000 users in the env want to increase their vhd container size, can that be automated with some scripts to increase size from default 30 to 50 gb
First of all there are multiple settings at play here.
if the profile settings are dynamic when they are created and you said the size in gigabytes to something ridiculously high like 100 GB or even a terabyte then you will never have to do maintenance to expand them.
Now before you think I’m crazy, since they are dynamic they only take up the actual size that a user consumes. So a brand new default Windows profile will start off with about 200 MB worth of consumed space. If they fill that space up to 5 GB and your disk was allocated as one terabyte you only pay for 5 GB. Does that make sense?